MGASA-2014-0383

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2014-0383.html

Import Source

https://advisories.mageia.org/MGASA-2014-0383.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2014-0383

Related

CVE-2014-6300

Published

2014-09-22T08:31:24Z

Modified

2014-09-22T08:17:59Z

Summary

Updated phpmyadmin package fix CVE-2014-6300

Details

Updated phpmyadmin package fixes security vulnerability:

In phpMyAdmin before 4.1.14.4, by deceiving a logged-in user to click on a crafted URL, it is possible to perform remote code execution and in some cases, create a root account due to a DOM based XSS vulnerability in the micro history feature (CVE-2014-6300).

References

https://advisories.mageia.org/MGASA-2014-0383.html
https://bugs.mageia.org/show_bug.cgi?id=14100
http://www.phpmyadmin.net/home_page/security/PMASA-2014-10.php

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2014-0383

Affected packages